-
Type:
Bug
-
Resolution: Unresolved
-
Priority:
Major - P3
-
None
-
Affects Version/s: None
-
Component/s: Data Explorer
-
None
-
Environment:OS:
node.js / npm versions:
Additional info:
Problem Statement/Rationale
What is going wrong? What action would you like the Engineering team to take?
An M10 cluster is reporting that it is unable to run the currentOp aggregation due to authorization in data explorer. The x.509 used to authenticate should have the appropriate permissions for this:
- Cluster link: https://cloud.mongodb.com/v2/658c5585da77ce29cc8b485f#/clusters/detail/Nov11
- Project link: https://cloud.mongodb.com/v2/658c5585da77ce29cc8b485f#/clusters
Please be sure to attach relevant logs with any sensitive data redacted.
How to retrieve logs for: Compass; Shell
Steps to Reproduce
How could an engineer replicate the issue you’re reporting?
Create a collection, observe server logs. You don't have to create an index because the command will just be attempted at this point.
Expected Results
What do you expect to happen?
Actual Results
What do you observe is happening?
We should have the permission to run this command.
Additional Notes
Any additional information that may be useful to include.
mongod log attached with relevant error:
{"t":{"$date":"2025-11-11T16:12:06.277+00:00"},"s":"I", "c":"NETWORK", "id":6723804, "ctx":"conn1825","msg":"Ingress TLS handshake complete","attr":{"durationMillis":57}}
{"t":{"$date":"2025-11-11T16:12:06.277+00:00"},"s":"I", "c":"NETWORK", "id":6723801, "ctx":"conn1825","msg":"Accepted TLS connection from peer","attr":{"peerSubject":"CN=dave.walker@mongodb.com","cipher":"ECDHE-RSA-AES256-GCM-SHA384"}}
{"t":{"$date":"2025-11-11T16:12:06.277+00:00"},"s":"W", "c":"NETWORK", "id":23222, "ctx":"conn1825","msg":"Peer certificate expiration information","attr":{"peerSubjectName":"CN=dave.walker@mongodb.com","daysDays":0}}
{"t":{"$date":"2025-11-11T16:12:06.338+00:00"},"s":"I", "c":"NETWORK", "id":51800, "ctx":"conn1825","msg":"client metadata","attr":{"remote":"34.227.70.30:32610","client":"conn1825","negotiatedCompressors":[],"doc":{"application":{"name":"Data Explorer--69135d6ebd6d495253eb277e"},"driver":{"name":"nodejs","version":"6.19.0"},"platform":"Node.js , LE","os":{"name":"Unknown","architecture":"Unknown","version":"5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36","type":"Browser"}}}}
{"t":{"$date":"2025-11-11T16:12:06.338+00:00"},"s":"I", "c":"ACCESS", "id":10483900,"ctx":"conn1825","msg":"Connection not authenticating","attr":{"client":"34.227.70.30:32610","doc":{"application":{"name":"Data Explorer--69135d6ebd6d495253eb277e"},"driver":{"name":"nodejs","version":"6.19.0"},"platform":"Node.js , LE","os":{"name":"Unknown","architecture":"Unknown","version":"5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36","type":"Browser"}}}}
{"t":{"$date":"2025-11-11T16:12:06.339+00:00"},"s":"I", "c":"ACCESS", "id":5286306, "ctx":"conn1825","msg":"Successfully authenticated","attr":{"client":"34.227.70.30:32610","isSpeculative":true,"isClusterMember":false,"mechanism":"MONGODB-X509","user":"CN=dave.walker@mongodb.com","db":"$external","result":0,"metrics":{"conversation_duration":{"micros":722,"summary":{}}},"doc":{"application":{"name":"Data Explorer--69135d6ebd6d495253eb277e"},"driver":{"name":"nodejs","version":"6.19.0"},"platform":"Node.js , LE","os":{"name":"Unknown","architecture":"Unknown","version":"5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36","type":"Browser"}},"extraInfo":{}}}
{"t":{"$date":"2025-11-11T16:12:06.464+00:00"},"s":"I", "c":"NETWORK", "id":6788700, "ctx":"conn1825","msg":"Received first command on ingress connection since session start or auth handshake","attr":{"elapsedMillis":125}}
{"t":{"$date":"2025-11-11T16:12:25.826+00:00"},"s":"I", "c":"ACCESS", "id":20436, "ctx":"conn1825","msg":"Checking authorization failed","attr":{"error":{"code":13,"codeName":"Unauthorized","errmsg":"not authorized on admin to execute command { aggregate: 1, pipeline: [ { $currentOp: { allUsers: true, localOps: false } }, { $match: { ns: \"foo.bar\", progress: { $type: \"object\" }, command.createIndexes: { $exists: true } } }, { $unwind: \"$command.indexes\" }, { $group: { _id: \"$command.indexes.name\", progress: { $first: { $cond: { if: { $gt: [ \"$progress.total\", 0 ] }, then: { $divide: [ \"$progress.done\", \"$progress.total\" ] }, else: 0 } } } } } ], cursor: {}, lsid: { id: UUID(\"6064f529-0cd8-477d-8976-ca70cd595d42\") }, $clusterTime: { clusterTime: Timestamp(1762877518, 1), signature: { hash: BinData(0, 9BDABD173888103CADF78BA51681F16488AE1DAA), keyId: 7571501028965613574 } }, $db: \"admin\" }"}}}
{"t":{"$date":"2025-11-11T16:12:56.079+00:00"},"s":"I", "c":"NETWORK", "id":22944, "ctx":"conn1825","msg":"Connection ended","attr":{"remote":"34.227.70.30:32610","isLoadBalanced":false,"uuid":{"uuid":{"$uuid":"4af7df71-8bff-4fae-a80d-e890f635409c"}},"connectionId":1825,"connectionCount":58}}